Themes Vulnerabilities

Ya'aburnee 1.0.7 - Privilage Escalation

Description

Vulnerability allows an attacker to escalate privileges on the site and have an admin account which may lead to a full site takeover

Affects Themes

yaaburnee-themes
No known fix

References

URL
https://packetstormsecurity.com/files/#130652/
URL
https://web.archive.org/web/20150324045141/https://research.evex.pw/?vuln=6

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Submitter
Evex
Submitter twitter
Evex_1337
Verified
No
WPVDB ID
a2e7d1f3-3b25-4bc7-a831-a1afb38268b8

Timeline

Publicly Published
2015-03-04 (about 9 years ago)
Added
2015-03-05 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2014-08-01
Title
MaxButtons 1.19.0 - includes/maxbuttons-button-css.php Authentication Bypass
Published
2021-11-02
Title
WP DSGVO Tools (GDPR) < 3.1.24 - Unauthenticated Arbitrary Post Deletion
Published
2015-03-19
Title
All-in-One WP Migration < 2.0.5 - Unauthenticated Database Export
Published
2020-04-28
Title
LearnPress < 3.2.6.9 - Authenticated Post Creation and Status Modification
Published
2022-10-24
Title
tagDiv Composer < 3.5 - Unauthenticated Account Takeover